Vulnerabilities
YS-infoware BA-Workflow SQL Injection Risks Database Integrity
Authenticated attackers can manipulate databases in BA-Workflow versions prior to 3.6 via a high-severity SQL injection flaw.
CWE-89
Everything AppSec Scoop has reported about CWE-89: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
SQL Injection in Link Whisper Free 0.9.7 Allows Blind Attacks on Affected Systems
A critical SQL injection flaw in Link Whisper Free versions up to 0.9.7 allows blind attacks, requiring immediate attention from web security teams managing affected installations.